Removed App-Password. The accounts I use for testing are dedicated test-accounts. The passwords are revocable and made invalid before committing any changes. There's no way to attack the server with these credentials.
The User-Agent was still set from an other app I copied some code from
